Privacy Policy

What HopFox VPN collects, why, where it goes, how long we keep it and how to have it deleted.

Last updated 27 October 2026.

1. Who this policy covers

This policy covers the HopFox VPN apps for Android, Windows, macOS and Linux, the website hopfoxvpn.com, the support page and the VPN servers that carry your traffic (together, the "service"). "We" and "us" mean the operator of HopFox VPN; "you" means anyone who uses the service.

It explains what personal data we process and on what basis. If anything here is unclear, ask through the support page before you use the service.

2. Your account

The first time you open the app it creates an account number for you, for example 1234 5678 9012 3456. We do not ask for an email address, a name, a phone number or a password. The number itself is the key to the account: anyone who has it can sign in, so keep it private.

We cannot tell who is behind an account number. We also cannot restore access if you lose the number, because there is nothing else to check it against.

3. What we collect

The service keeps only what it needs to work, to stop abuse and to fix problems.

Account

• The account number and the date it was created.
• The network address the account was created from and the country we derive from it. To work out the country, the address is looked up in our own address database and, if it has no answer, at ip-api.com.
• The plan: free, trial or Premium, its end date and the device limit.

Devices

• The type of system, the device model as the system reports it, the system version, the app version, the language and the time zone.
• When the device was added and when it last contacted us.
• The network address the device registered from and the last address it used to contact our servers directly, outside the VPN tunnel.
• The total amount of data the device has sent and received through the VPN, as a running number of bytes.
• The keys that let the device connect.

Free Premium trial

The free Premium days are given once per device, even if the app is reinstalled. For that, when the app creates an account it sends a one-way fingerprint (a SHA-256 hash) of the device's system ID: the machine ID on a computer, and on Android the ID the system gives to this app. The ID itself never leaves the device, the fingerprint cannot be turned back into it, and it is stored on its own, with the date only, not linked to any account.

Connection events

When a device connects, disconnects or fails to connect, the app tells us the time, the location, the protocol and, for a failure, a short reason. We use these events to count load, to see which locations work and to answer support requests.

Online status

While you are connected, each server reports which accounts are online on it. This status is kept in memory for about two minutes and is not written down.

Error reports

When a connection fails, the tunnel is up but no traffic passes, a check through the tunnel fails or the app crashes, the app sends us a technical report. A report contains the device model, the system and app version, the type of network (Wi-Fi, mobile or wired) and, on mobile networks, the operator name and country as the phone reports them, your network address as seen by our servers, the location and protocol in use, traffic counters, timings and the error text. Reports never contain the websites you open or the contents of your traffic.

Payments

Premium is paid by card on a payment page run by Stripe. Stripe collects and processes your card details; we never see the full card number. From Stripe we receive the email address you entered on the payment page, Stripe's customer and subscription identifiers, the amount, the currency, the dates and the status of each payment. We also record the network address the payment was started from.

Support tickets

When you open a ticket on the support page, we keep what you write, the account number if you give it, your app version and the network address the request came from.

Website

The website does not use advertising or analytics trackers and does not set tracking cookies. It may store your language choice and similar settings in your browser. Requests to the website pass through Cloudflare, which sees your network address as part of delivering the page.

4. What we do not collect

• The websites and apps you use through the VPN, your DNS queries, the addresses you connect to and the contents of your traffic.
• Your name, email (except the one you give Stripe when paying), phone number, contacts, photos, files or precise location.
• Advertising identifiers. We do not sell or rent personal data and do not use it for advertising.

Our VPN servers do not write per-user logs of your activity. When we investigate a network problem we may, for a limited time and on specific servers, record packet headers of traffic passing through those servers: addresses, ports, sizes and timings, never the contents. Such records are used only to diagnose the problem and are deleted within 7 days.

5. Why we use the data

• To provide the service you asked for: create the account, connect your devices, apply your plan and the device limit. Legal basis: performance of our agreement with you.
• To take payments, issue receipts and keep accounting records. Legal basis: performance of the agreement and our legal obligations.
• To keep the service working and secure: find failures, balance load between servers, stop fraud, spam, attacks and other abuse, and enforce the Terms of Service. Legal basis: our legitimate interest in a reliable and safe service.
• To answer your support requests. Legal basis: performance of the agreement and our legitimate interest.
• To meet legal obligations, including valid requests from authorities described below.

We do not make decisions about you based solely on automated processing that have legal or similarly significant effects.

6. How long we keep it

• Account and device data: while the account exists. Deleting the account erases it, as described in section 12.
• Connection events: 90 days.
• Error reports: 30 days.
• Online status: about two minutes, in memory only.
• Free trial fingerprints (section 3): for as long as we offer the trial, so it is not given twice to the same device. They are not linked to any account.
• Support tickets: 24 months after the last message in the ticket.
• Payment records: 6 years after the payment, because tax and accounting law requires it. This applies even after the account is deleted.
• Temporary packet header records on servers (section 4): no longer than 7 days.

Data is deleted automatically when its period ends.

7. Services we rely on

We share data with other companies only as far as each of them needs it to do its part of the work:

• Stripe: card payments, subscriptions and invoices.
• Cloudflare: delivery and protection of the website and of the service's programming interface; it sees network addresses and request details while passing them on.
• Data centre and hosting providers: they run the servers that the service uses, in the countries listed on the Locations page.
• ip-api.com: looks up the country of a network address when an account is created and our own database has no answer.
• ipify (api.ipify.org): the app asks it for your public address so it can show it to you and check that the tunnel works; it sees the address the request comes from.

Each of these companies processes data under its own terms and privacy policy. We do not give personal data to anyone else except as described in section 9.

8. Where the data is stored

The account database runs on a server in Germany. VPN servers are in the countries listed on the Locations page, some of them outside the European Economic Area and the United Kingdom. Stripe and Cloudflare operate worldwide. Where data leaves the European Economic Area or the United Kingdom, we rely on the safeguards these providers offer, such as standard contractual clauses.

9. Requests from authorities

We follow the law of the places where we operate. If we receive a valid legal order, we may have to provide the data we hold about an account, and only the data described in this policy. We cannot provide what we do not have: we do not have your browsing history or the contents of your traffic. We check each request, refuse requests that are not valid and disclose no more than the order requires.

10. Security

Traffic between the app and our servers is encrypted. Access to our servers and to the account database is limited to the people who run the service and protected with keys. Device tokens are stored only in hashed form. No system is perfectly secure, so we cannot guarantee absolute security, but if we learn of a breach that affects your data we will act on it and inform you where the law requires.

11. Your rights

Depending on where you live, you may have the right to ask for access to your data, a copy of it, its correction or deletion, to restrict or object to its use and to take it to another provider. You can also complain to a data protection authority, for example the Information Commissioner's Office in the United Kingdom or the authority of your country in the European Union.

Because accounts are anonymous, we can only act on a request when we can link it to an account: send it from the support page together with your account number. We answer within one month.

12. Deleting your data

In the app, open Account and choose Delete account and all data. This happens at once:

• all devices of the account are signed out and lose access;
• any active subscription is cancelled, so there are no further charges;
• connection events, error reports and the network addresses, device names and system details of the account are erased;
• the account number is closed and is never issued to anyone else.

Payment records stay for the period the law requires (section 6). The remaining paid time is not refunded; see the Money-back Policy.

13. Children

The service is not intended for children under 16. We do not knowingly collect data from them. If you believe a child has created an account, tell us through the support page and we will delete it.

14. Changes to this policy

We may update this policy when the service or the law changes. The date at the top shows the latest version. If a change significantly affects how we use your data, we will announce it in the news before it takes effect.

15. Contact

Questions and requests about privacy go through the support page. No email address is needed.